The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_62217 advisory.

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:55855 advisory.

    * libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    * libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)

    * libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787056678 advisory.

  - A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in     the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename     doesn't exist and may lead to possible signing failures or heap corruption. (CVE-2025-4878)

  - A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject     shell metacharacters, exposing environment variables and causing unintended shell behavior.
    (CVE-2026-59846)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21444-1 advisory.

    - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
    - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
    - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
    - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
    - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
    - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
    - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
    - CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
    - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

    Changes for libssh:

    - Update to 0.11.5:

     * Zero-initialize every ssh_string
     * Fix compatibility with C23 / gcc16
     * Fix multiple memory leaks, null checks, and error checks
     * Validate peer public key in DH key exchange
     * Avoid remote window overflow
     * Avoid off-by-one overflow during kbdint authentication
     * Avoid logging uninitialized sequence numbers
     * Avoid double conversion of SFTP version number
     * Send correct SFTP server version number
     * Avoid handling repeated SFTP INIT messages
     * Harmonize return values from SFTP server callbacks

    - Update %suse_version checks for SLES 16.x (jsc#PED-15815)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory.

    - CVE-2026-15370: stack buffer overflow in SFTP server longname construction (bsc#1272162).
    - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
    - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
    - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
    - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
    - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
    - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
    - CVE-2026-59849: denial of service via automatic certificate authentication loop (bsc#1272170).
    - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

    Changes for libssh:

    - Update to 0.11.5:

     * Zero-initialize every ssh_string
     * Fix compatibility with C23 / gcc16
     * Fix multiple memory leaks, null checks, and error checks
     * Validate peer public key in DH key exchange
     * Avoid remote window overflow
     * Avoid off-by-one overflow during kbdint authentication
     * Avoid logging uninitialized sequence numbers
     * Avoid double conversion of SFTP version number
     * Send correct SFTP server version number
     * Avoid handling repeated SFTP INIT messages
     * Harmonize return values from SFTP server callbacks

    - Update %suse_version checks for SLES 16.x (jsc#PED-15815)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55855 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: information disclosure via short GSSAPI Curve25519 public key (CVE-2026-59842)

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: denial of service via automatic certificate authentication loop (CVE-2026-59849)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    * libssh: libssh: authentication bypass via missing GSSAPI principal check (CVE-2026-59851)

    * libssh: libssh: stack buffer overflow in SFTP server longname construction (CVE-2026-15370)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4844 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4844-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                        Simon Quigley     October 20, 2026                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : libssh     Version        : 0.10.6-0+deb12u3     CVE ID         : CVE-2026-0964 CVE-2026-0965 CVE-2026-0966 CVE-2026-0967                      CVE-2026-0968 CVE-2026-3731 CVE-2026-59843 CVE-2026-59844                      CVE-2026-59845 CVE-2026-59846 CVE-2026-59847 CVE-2026-59848                      CVE-2026-59850

    Several vulnerabilities were discovered in libssh, a tiny C SSH library.

    CVE-2026-0964

        A malicious SCP server can send a path that escapes the working         directory. This is the same issue as OpenSSH CVE-2019-6111.

    CVE-2026-0965

        Parsing a configuration file that is not a regular file, or that is         too large, could be used for a denial of service.

    CVE-2026-0966

        ssh_get_hexa() could underflow a heap buffer on invalid input.

    CVE-2026-0967

        A crafted pattern in a configuration or known_hosts file could make         match_pattern() backtrack until it times out.

    CVE-2026-0968

        A malicious SFTP server can send a longname that         sftp_parse_longname() reads past.

    CVE-2026-3731

        sftp_extensions_get_name() and sftp_extensions_get_data() did not         reject an index past the end of the extension list.

    CVE-2026-59843

        A peer that advertises a maximum channel packet size of 0 can cause         a denial of service.

    CVE-2026-59844

        An oversized length in an SSH_FXP_READ request can cause a denial of         service.

    CVE-2026-59845

        ProxyCommand did not check the return value of fork(), which can         cause a denial of service.

    CVE-2026-59846

        A username containing shell metacharacters could be expanded into         ProxyCommand via %r.

    CVE-2026-59847

        With the OpenSSL backend, a failed AES-GCM tag check could be         treated as success. The gcrypt backend was already correct.

    CVE-2026-59848

        An SFTP response with a request id the client did not send could         cause a denial of service.

    CVE-2026-59850

        A DATA packet on a remotely closed channel could be delivered to a         callback after the channel was freed.

    For Debian 12 bookworm, these problems have been fixed in version     0.10.6-0+deb12u3.

    We recommend that you upgrade your libssh packages.

    For the detailed security status of libssh please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libssh

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3330-1 advisory.

    - CVE-2026-59843: denial of service via zero advertised channel packet size (bsc#1272164).
    - CVE-2026-59844: denial of service via oversized SFTP read length (bsc#1272165).
    - CVE-2026-59845: denial of service via unchecked ProxyCommand fork() failure (bsc#1272166).
    - CVE-2026-59846: information disclosure via ProxyCommand %r username expansion (bsc#1272167).
    - CVE-2026-59847: integrity downgrade via OpenSSL AES-GCM tag verification (bsc#1272168).
    - CVE-2026-59848: denial of service via SFTP responses with unknown request IDs (bsc#1272169).
    - CVE-2026-59850: use-after-free via data callbacks on closed channels (bsc#1272171).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62217 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62218 advisory.

    libssh is a library which implements the SSH protocol. It can be used to implement client and server     applications.

    Security Fix(es):

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)

    * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)

    * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)

    * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)

    * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)

    * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)

    * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory.

    [0.9.6-17]
    - Backport CVE patches from 0.11.5       Resolves: RHEL-215677       Resolves: RHEL-215674       Resolves: RHEL-215680       Resolves: RHEL-215678       Resolves: RHEL-215675       Resolves: RHEL-215676       Resolves: RHEL-215679

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1751:03 advisory.

    * libssh: libssh: denial of service via zero advertised channel packet size (CVE-2026-59843)
      * libssh: libssh: denial of service via oversized SFTP read length (CVE-2026-59844)
      * libssh: libssh: denial of service via unchecked ProxyCommand fork() failure (CVE-2026-59845)
      * libssh: libssh: information disclosure via ProxyCommand %r username expansion (CVE-2026-59846)
      * libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification (CVE-2026-59847)
      * libssh: libssh: denial of service via SFTP responses with unknown request IDs (CVE-2026-59848)
      * libssh: libssh: use-after-free via data callbacks on closed channels (CVE-2026-59850)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
353891	Rocky Linux 9 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2026_62217)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	high
337638	RockyLinux 10 : libssh (RLSA-2026:55855)	Nessus	Rocky Linux Local Security Checks	2026/8/18	2026/8/18	high
361407	AlmaLinux 9.2 [TuxCare] Security Update: libssh / libssh-config / libssh-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787056678)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	low
330077	openSUSE 16 Security Update : libssh (openSUSE-SU-2026:21444-1)	Nessus	SuSE Local Security Checks	2026/7/27	2026/8/3	high
330564	SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)	Nessus	SuSE Local Security Checks	2026/7/29	2026/7/31	high
337346	RHEL 10 : libssh (RHSA-2026:55855)	Nessus	Red Hat Local Security Checks	2026/8/18	2026/8/18	high
372635	Debian dla-4844 : libssh-4 - security update	Nessus	Debian Local Security Checks	2026/10/27	2026/10/28	medium
330533	SUSE SLED15 / SLES15 Security Update : libssh (SUSE-SU-2026:3330-1)	Nessus	SuSE Local Security Checks	2026/7/29	2026/7/31	high
342247	RHEL 9 : libssh (RHSA-2026:62217)	Nessus	Red Hat Local Security Checks	2026/9/1	2026/9/1	high
342250	RHEL 8 : libssh (RHSA-2026:62218)	Nessus	Red Hat Local Security Checks	2026/9/1	2026/9/1	high
342585	Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)	Nessus	Oracle Linux Local Security Checks	2026/9/3	2026/9/3	high
342593	MiracleLinux 9 : libssh-0.10.4-19.el9_8 (AXSA:2026-1751:03)	Nessus	Miracle Linux Local Security Checks	2026/9/3	2026/9/3	high

检测

插件搜索

high

high

low

high

high

high

medium

high

high

high

high

high